This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft File: NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json) Hash identifier: imxUz1GVC2mK2V8mm9STPk7PFxpT5RuY3qlHKfGQ9bY= Subject key identifier: 5C:AF:B6:C0:9F:CF:B2:09:2D:FE:A6:2A:80:A4:90:3B:C3:84:9F:13 Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0 Certificate issuer: /CN=36368aac0f4a28c8a31760f06b578dae453146f0 Certificate serial: 019C4321DD9217886488B37C6DCBBC5533AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 16:00:18 +0000 Manifest this update: Mon 09 Feb 2026 16:00:18 +0000 Manifest next update: Tue 10 Feb 2026 16:00:18 +0000 Files and hashes: 1: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: JCmWqRC6gRQcpExdJte3xGZsUBT4oCmW+71cqIY+Txo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:dd:92:17:88:64:88:b3:7c:6d:cb:bc:55:33:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0 Validity Not Before: Feb 9 16:00:18 2026 GMT Not After : Feb 10 16:00:18 2026 GMT Subject: CN=5cafb6c09fcfb2092dfea62a80a4903bc3849f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f0:46:bb:a9:a3:98:67:e7:59:56:36:6b:99: 9d:4d:33:93:8c:a2:1f:15:ac:7f:c7:c1:f6:e2:e1: 64:ed:b8:26:96:f5:ea:6f:40:7c:96:73:6b:b7:49: b0:69:c7:a5:6a:e6:ac:df:18:01:73:d8:f5:16:76: d3:35:2a:b4:83:87:98:f8:bc:6c:d7:ff:22:31:c0: 9f:c7:4f:58:4e:70:23:54:a9:aa:41:a2:e1:3c:29: a1:68:41:23:bf:22:f4:4b:5f:93:c0:f8:8f:61:88: 9a:00:81:3c:3b:4c:96:50:dc:85:6e:df:96:24:e4: 17:02:9a:c2:bc:00:c9:5d:dc:fa:8a:9f:cb:05:28: a8:07:92:1d:0b:be:ef:d1:01:48:be:8d:72:cf:2f: 0f:27:83:d3:34:d8:ec:6b:8c:87:1f:51:91:e7:83: 85:3f:f3:4c:fc:65:e2:bc:72:5a:f0:67:3e:fa:73: 37:27:80:9b:de:78:4d:65:60:28:e4:cc:47:83:86: e8:db:b6:70:1e:e8:a7:2e:16:15:0e:47:c1:c9:8e: 68:6a:39:3e:10:9f:cb:90:79:f9:ff:c3:1c:49:2a: 7a:64:d6:6d:e0:33:9a:3d:c9:08:66:50:71:68:35: 10:53:c6:a6:52:8c:93:c0:f6:fb:0d:00:d7:c3:c7: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AF:B6:C0:9F:CF:B2:09:2D:FE:A6:2A:80:A4:90:3B:C3:84:9F:13 X509v3 Authority Key Identifier: keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:4b:a8:1a:a6:65:14:16:23:c9:4c:a7:ec:cd:9c:05:c9:a0: 75:39:65:d6:cf:1f:a3:d3:ff:cf:df:7e:04:dc:c1:1e:ff:be: 03:77:e4:a5:55:b5:6c:44:91:94:1f:83:b9:31:a8:f4:69:18: ac:de:65:39:21:4c:48:18:ae:ae:8b:00:1b:7b:a1:8c:f8:b8: a4:6f:ad:71:15:2e:77:20:bf:18:e6:98:b8:a9:16:97:fd:a2: f9:19:e8:2e:0d:8b:16:6a:f3:2f:1c:ae:fd:b0:97:66:bf:45: 0d:fe:ce:5f:e6:f9:a8:7a:41:3f:5c:6b:b5:dd:1a:06:c6:bd: 3b:70:97:9c:c9:7c:1f:63:89:98:32:04:b2:ff:47:72:9b:27: de:c3:fa:a3:79:dd:2a:fc:af:d2:b7:38:df:3e:f2:0c:0a:1c: 16:35:de:46:20:49:4a:1a:10:73:fb:13:1d:0d:ff:da:af:52: 6d:37:6c:d2:6b:2a:ec:f2:54:28:38:b8:53:62:b8:b4:86:67: 12:3e:41:fd:19:e7:8f:8e:18:00:19:0b:69:50:fb:47:0d:2e: 99:b3:47:3c:9a:4b:3b:30:4a:c9:a8:df:b0:85:17:da:c0:72: ad:2d:8e:4b:a9:06:51:8f:f8:62:d4:4f:ed:69:f3:a4:a4:c9: 13:8b:cc:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDId2SF4hkiLN8bcu8VTOuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MzY4YWFjMGY0YTI4YzhhMzE3NjBmMDZiNTc4ZGFlNDUz MTQ2ZjAwHhcNMjYwMjA5MTYwMDE4WhcNMjYwMjEwMTYwMDE4WjAzMTEwLwYDVQQD Eyg1Y2FmYjZjMDlmY2ZiMjA5MmRmZWE2MmE4MGE0OTAzYmMzODQ5ZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPBGu6mjmGfnWVY2a5mdTTOTjKIf Fax/x8H24uFk7bgmlvXqb0B8lnNrt0mwacelauas3xgBc9j1FnbTNSq0g4eY+Lxs 1/8iMcCfx09YTnAjVKmqQaLhPCmhaEEjvyL0S1+TwPiPYYiaAIE8O0yWUNyFbt+W JOQXAprCvADJXdz6ip/LBSioB5IdC77v0QFIvo1yzy8PJ4PTNNjsa4yHH1GR54OF P/NM/GXivHJa8Gc++nM3J4Cb3nhNZWAo5MxHg4bo27ZwHuinLhYVDkfByY5oajk+ EJ/LkHn5/8McSSp6ZNZt4DOaPckIZlBxaDUQU8amUoyTwPb7DQDXw8ccpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyvtsCfz7IJLf6mKoCkkDvDhJ8TMB8GA1UdIwQY MBaAFDY2iqwPSijIoxdg8GtXja5FMUbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmphS3JBOUtLTWlqRjJEd2ExZU5ya1V4UnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTMxNWEtYWQwMi00NzY4LWI3OGQt NTAyNDdmMTJjZTc0LzEvTmphS3JBOUtLTWlqRjJEd2ExZU5ya1V4UnZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTMxNWEtYWQwMi00NzY4LWI3OGQtNTAyNDdmMTJjZTc0 LzEvTmphS3JBOUtLTWlqRjJEd2ExZU5ya1V4UnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPEuoGqZl FBYjyUyn7M2cBcmgdTll1s8fo9P/z99+BNzBHv++A3fkpVW1bESRlB+DuTGo9GkY rN5lOSFMSBiurosAG3uhjPi4pG+tcRUudyC/GOaYuKkWl/2i+RnoLg2LFmrzLxyu /bCXZr9FDf7OX+b5qHpBP1xrtd0aBsa9O3CXnMl8H2OJmDIEsv9Hcpsn3sP6o3nd Kvyv0rc43z7yDAocFjXeRiBJShoQc/sTHQ3/2q9SbTds0msq7PJUKDi4U2K4tIZn Ej5B/Rnnj44YABkLaVD7Rw0umbNHPJpLOzBKyajfsIUX2sByrS2OS6kGUY/4YtRP 7WnzpKTJE4vMvA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:44 2026 by rpki-client